Cisco Adaptive Security Appliance SSL VPN Remote Privilege Escalation Vulnerability
BID:66748
Info
Cisco Adaptive Security Appliance SSL VPN Remote Privilege Escalation Vulnerability
| Bugtraq ID: | 66748 |
| Class: | Design Error |
| CVE: |
CVE-2014-2127 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 09 2014 12:00AM |
| Updated: | Apr 09 2014 12:00AM |
| Credit: | Jonathan Claudius from Trustwave SpiderLabs and Laura Guay from Dell SecureWorks |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco Adaptive Security Appliance SSL VPN Remote Privilege Escalation Vulnerability
Cisco Adaptive Security Appliance is prone to a remote privilege-escalation vulnerability.
A remote attacker can exploit this issue to gain administrative access to affected devices.
This issue is tracked by Cisco Bug ID CSCul70099.
Cisco Adaptive Security Appliance is prone to a remote privilege-escalation vulnerability.
A remote attacker can exploit this issue to gain administrative access to affected devices.
This issue is tracked by Cisco Bug ID CSCul70099.
Exploit / POC
Cisco Adaptive Security Appliance SSL VPN Remote Privilege Escalation Vulnerability
Attackers can use standard, readily available tools to exploit this issue.
Attackers can use standard, readily available tools to exploit this issue.
References
Cisco Adaptive Security Appliance SSL VPN Remote Privilege Escalation Vulnerability
References:
References:
- Cisco Homepage (Cisco )
- Multiple Vulnerabilities in Cisco ASA Software (Cisco)